Please keep in mind that you must use authenticated encryption (ie aes-gcm / chacha20-poly1305)
I'd either use ring or the aead crate

just learnt what authenticated encryption is, thanks.
makes sense, and i'm going to use.
however, https://docs.rs/ring/0.16.9/ring/index.html looks a bit low-level.. or at least assumes more encryption knowledge than i have..
any example how to use it?

@Elichai Turkel

Yeah ring is somewhat messy.
Look at the table here: https://github.com/RustCrypto/AEADs/blob/master/README.md
My recommendation is if it's meant to run on x86 use aes-gcm if also phones/low resource devices then use chacha20-poly1305 (the first has hardware implementations while the latter is really fast in software)